CyberShield Pro Documentation

Everything you need to know about using our cybersecurity tools, running scans, understanding your security score, and managing your account.

Introduction

CyberShield Pro is a modular cybersecurity health platform that helps individuals, small businesses, developers, and agencies assess and improve their security posture. We provide free scanning tools for immediate visibility into your security gaps, and optional paid subscriptions for continuous monitoring, scheduled scans, detailed reporting, and advanced features like phishing simulations.

Our philosophy: security should be accessible, understandable, and actionable — not expensive, technical, or fear-driven.

💡 Tip: You can use all free tools without creating an account. Sign up only when you want to save your results, track your score over time, or enable continuous monitoring.

Quick Start Guide

Here is the fastest path to improving your cybersecurity posture:

Run a free website scan at /tools/scanner.html — enter your domain and see results in seconds.
Get your security score at /tools/scorecard.html — answer questions about your setup for a full assessment.
Review your top gaps — the scorecard highlights your 5 weakest areas with specific remediation guidance.
Create a free account — save your results and set up alerts for new issues.
Upgrade when ready — unlock scheduled scans, PDF reports, and team features.

Creating an Account

Navigate to /signup.html and provide:

Full name — displayed in your dashboard and reports.
Email address — used for login and security alerts. Must be a valid, accessible email.
Password — minimum 8 characters. Use a strong, unique password.
Terms acceptance — you must agree to our Terms of Service and Privacy Policy.

After signup you are automatically logged in and redirected to your dashboard. No email verification is required for the free tier.

If you forget your password, use the /reset-password.html page. We will send a secure reset link to your registered email. The link expires after 1 hour.

Website Security Scanner

The Website Security Scanner is our most comprehensive free tool. Enter any domain you own or have permission to scan, and within 10-30 seconds you receive a full security assessment covering:

Category	What It Checks
HTTPS & TLS	Certificate validity, TLS version, cipher strength, HTTPS redirect configuration
Security Headers	CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
DNS & Email	SPF, DKIM, DMARC, DNSSEC, MX records, DNS misconfigurations
Cookie Security	HttpOnly, Secure, and SameSite flags on session cookies
OWASP-Oriented	Server header disclosure, X-Powered-By disclosure, content-type charset, common misconfigurations

Each check returns a Pass, Fail, or Warning status with a detailed explanation and actionable remediation recommendation.

⚠ Important: This scanner performs only non-destructive, publicly observable checks. It does not attempt to exploit vulnerabilities, modify data, or send authenticated requests. It is a defensive assessment tool, not an offensive exploitation platform.

SSL/TLS Checker

The SSL/TLS Checker verifies that your website serves traffic over a secure, encrypted connection. It checks:

Whether the domain is reachable over HTTPS
Whether HTTP requests are redirected to HTTPS
TLS version information (from Cloudflare headers when available)
Basic certificate validity assessment

Use this tool before launching a new site, after renewing your SSL certificate, or as a periodic health check.

Security Headers Checker

The Security Headers Checker analyzes all HTTP security headers returned by your web server. These headers are your first line of defense against many common web attacks including XSS, clickjacking, and MIME-sniffing.

Headers checked: Content-Security-Policy, Strict-Transport-Security (HSTS), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.

Each missing or misconfigured header includes a recommended value you can add to your server or CDN configuration.

DNS Security Checker

The DNS Security Checker audits your domain's DNS records for email security and domain integrity:

SPF (Sender Policy Framework) — authorizes which mail servers can send email from your domain.
DKIM (DomainKeys Identified Mail) — cryptographically signs outgoing emails to prevent tampering.
DMARC — tells receiving servers how to handle unauthenticated email and provides reporting.
NS Records — verifies that your domain's name servers are properly configured and resolving.

Password Strength Checker

The Password Strength Checker is a browser-based tool that analyzes password strength without transmitting anything to our servers. It checks for:

Length (8+, 12+, and 16+ character benchmarks)
Character variety (uppercase, lowercase, numbers, special characters)
Common pattern detection (avoids "password", "12345", "qwerty", etc.)
Repeated and sequential character detection

The tool provides an estimated crack time and a real-time strength meter. Your password never leaves your browser.

🔒 Privacy Note: For maximum security, test with a password similar to but not identical to your actual passwords. Use a password manager for generating and storing unique, strong passwords.

Security Scorecard

The Security Scorecard is the most accessible entry point for non-technical users. Answer 15 questions across 5 security domains and receive:

An overall security score (0-100) with a letter grade (A through F)
Category breakdowns for Website Security, Email & DNS, Identity & MFA, Backup Readiness, and Employee Awareness
Your top 5 security gaps with specific remediation recommendations

The scorecard takes approximately 3 minutes to complete and does not require an account.

Dashboard Overview

Your dashboard is the central hub for monitoring your cybersecurity posture. After logging in, you see:

Stats cards — total scans, security score, monitored sites, and current plan.
Recent scans — the latest scan results with scores and timestamps.
Quick actions — shortcuts to run a new scan, check SSL, or get your scorecard.
Upgrade prompt — only visible on the Free plan, linking to subscription options.

The sidebar provides navigation to all dashboard sections: Overview, Scan History, Reports, Subscription, and Account Settings.

Scan History

The Scan History page lists all scans you have run, paginated for easy browsing. Each entry shows:

Target domain
Security score (color-coded: green ≥80, yellow ≥50, red <50)
Date and time of scan
Pass/fail counts and link to the detailed report

Scan history retention depends on your plan: 30 days on Personal, unlimited on Business and above.

Reports & PDFs

The Reports page lists all generated security reports. On the Business plan and above, reports include downloadable PDF versions suitable for sharing with clients, stakeholders, or compliance auditors.

PDF reports are stored in Cloudflare R2 (object storage) and can be accessed via the download link on each report entry.

Subscription Plans

Plan	Price	Key Features
Free	$0/mo	One-off scans, basic score, educational recommendations
Personal	$5/mo	Weekly scans, identity checks, email alerts, 30-day history
Business	$19/mo	Daily scans, PDF reports, 5 domains, priority support
Professional	$49/mo	20 domains, 5 team members, white-label reports, API access
Team	$99/mo	50 domains, unlimited members, phishing simulations, compliance reports
MSP/Agency	$299/mo	Multi-client dashboard, unlimited domains, white-label everything, dedicated support

All paid plans include a 7-day free trial. You can cancel anytime with no penalties.

Managing Your Billing

Payment processing is handled securely by Stripe and PayPal. We never see or store your full credit card or bank account details.

Subscribe: Visit /dashboard/subscription.html, select a plan, and choose Stripe (card) or PayPal.
Cancel: Click "Cancel Subscription" on the subscription page. You retain access until the end of your current billing period.
Billing history: All invoices are available via the subscription API and will appear in your dashboard.

Account Settings

The Account Settings page (/dashboard/account.html) lets you:

Update your name — changes are reflected immediately in your dashboard and reports.
Change your password — requires your current password for verification.
Manage notifications — toggle email alerts for scan completion, vulnerability detection, weekly score summaries, and product updates.
Delete your account — permanently removes all your data, scans, reports, and subscriptions. Requires typing "DELETE" to confirm.

To change your email address, contact support@cs-e-shop.com.

How We Handle Your Data

Data privacy and security are fundamental to our platform design:

Data Type	Storage	Protection
Passwords	Cloudflare D1	Hashed using SHA-256 with unique per-user salt. Plaintext passwords are never stored.
Email & name	Cloudflare D1	Encrypted at rest. Used only for authentication and account notifications.
Scan data	Cloudflare D1	Domain metadata and security check results. No sensitive user data in scan payloads.
Payment info	Stripe / PayPal	We store only subscription IDs and amounts. Card numbers are never seen or stored by us.
PDF reports	Cloudflare R2	Access-controlled by authenticated user session.
Password checker	None (client-side)	Runs entirely in your browser. Passwords are never transmitted to our servers.

Full details: Privacy Policy and GDPR Compliance.

Is Scanning Safe?

Yes. Our scanner is designed as a defensive assessment tool. Specifically:

It only performs publicly observable, passive checks — the same information visible to anyone visiting your website.
It does not attempt to exploit vulnerabilities, inject code, bypass authentication, or modify any data.
It respects robots.txt and rate-limits requests to avoid overwhelming target servers.
It identifies itself with a clear User-Agent header: CyberShieldPro/1.0 (Security Scanner).

You should only scan domains you own or have explicit permission to test. Scanning domains without authorization may violate applicable laws and our Terms of Service.

Troubleshooting

Scanner returns "Could not connect"

Verify the domain is spelled correctly and is accessible from the public internet. Ensure there is no firewall or CDN rule blocking requests from Cloudflare Workers IP ranges.

SSL check shows "Fail" but my site has HTTPS

Our scanner connects to port 443. If your server uses a non-standard port or requires SNI, the check may fail. Ensure your SSL certificate is valid and not expired.

DMARC check shows "Fail" but I think I have it configured

DMARC records use the _dmarc subdomain (e.g., _dmarc.example.com). Verify the record exists at the correct subdomain and is a TXT record starting with v=DMARC1.

Login issues

Use the password reset page. If the reset email does not arrive, check your spam folder. Contact support@cs-e-shop.com if the issue persists.

Subscription not activating

Stripe and PayPal subscriptions may take a few moments to provision. If your dashboard still shows "Free" after 5 minutes, contact support with your payment confirmation.

Need more help?

Email: support@cs-e-shop.com
Phone: 800-414-1059
Response time: Within 24 hours on business days.